You can find events regarding updates from the GUP by going to Monitors > Logs > Log type: System > Log content: Client activity > View log:
As shown in the screenshot, you can filter it by selecting appropriate event type (Client events) and Event source (SYLINK). You might then save the filter to do not have to configure it everytime.
You might click on Export at the top of the screen to get the results in CSV file, so you would then be able to edit it in Excel, to make a document that would fully match your needs.
Hi John, this post is very useful. It salved me in 2017, 5 years youo posted it. Good job!
You can actually see in the SEPM console which machine is downloading content from the GUP.
The screenshot I put here is a bit too large, but if you copy/paste it into mspaint, you will notice there are few more columns available on the right side of the console, including one showing downloading "Computer" name.
So finally, you can find in this table:
- Which machine A required content
- Which GUP was used by A
- Which file A downloaded from the GUP
This is good in that it details which content is pulled from what source, but it omits identifying which machine is doing the downloading.
On the other hand, the 12.1 client now has an event log for Symantec Endpoint Protection Client. It will verify that a specific machine has pulled its content update from a GUP, but it doesn't identify which GUP.
An SQL query that returns the same result can be found here: https://www-secure.symantec.com/connect/forums/sql-querys-database#comment-7090721
awesome :-) Thumbs up!
Thanks for this info as from last two weeks I was working on the same to get this info.
Voted UP.
Hello,
Voted. A Common Question which has been answered beautifully.
Good tip.
When it comes to content troubleshooting I would recommend using the "System cube" in IT-analytics. It gives the same data as the monitor, but presented much better.